The article reveals how Claude Cowork is vulnerable to file exfiltration attacks due to unresolved flaws in its code execution environment. Attackers can exploit prompt injection to upload sensitive user files to their accounts without any human approval. The risks are heightened by the tool's integration with various data sources, making it essential for users to remain cautious.

Cybersecurity researchers found three serious vulnerabilities in Anthropic's mcp-server-git, allowing attackers to manipulate AI assistants without needing system access. The flaws, affecting all versions before December 2025, enable code execution, file deletion, and potential exposure of sensitive data. Users are urged to update their systems immediately.